Blue Goat CyberSMMedical Device Cybersecurity
    K
    Infographics

    Visual references for MedTech cybersecurity.

    Hand-built diagrams covering FDA submissions, SBOM anatomy, threat modeling, lifecycle, and attack surface. Free to use, free to embed — a link back is appreciated.

    All diagrams

    6 infographics
    FDA submissions

    FDA Premarket Cybersecurity Submission Flow

    How the seven cybersecurity sections of an eSTAR premarket submission fit together under the FDA's February 2026 final guidance.

    Open infographic
    SBOM & supply chain

    Anatomy of an FDA-Ready SBOM

    What reviewers actually open when they read an SBOM: components, transitive dependencies, vulnerability links, and the metadata that matters.

    Open infographic
    FDA submissions

    FDA Deficiency Letter Response Decision Tree

    Decide in minutes whether an FDA reply is an RTA, a deficiency letter, or a hold letter — and what your response clock looks like for each.

    Open infographic
    Threat modeling

    STRIDE Applied to a Connected Medical Device

    Six STRIDE threat categories mapped onto the real attack surfaces of a connected device — firmware, BLE, mobile app, cloud, and clinician console.

    Open infographic
    Lifecycle

    The SPDF Lifecycle: Premarket to Postmarket

    Where Secure Product Development Framework activities live across the device lifecycle — from concept through end-of-support.

    Open infographic
    Attack surface

    Connected Medical Device Attack Surface Map

    Every entry point a penetration tester probes on a modern connected device — firmware, debug, radio, mobile, cloud, and the clinician console.

    Open infographic

    Use these in your own work

    Every diagram on this page ships as an SVG — scalable to any size, themeable, and accessible. Download from the individual infographic page. We only ask that you keep the credit line visible and link back to the source page.

    Ready when you are

    Get FDA cleared without the cybersecurity headaches.

    30-minute strategy session. No cost, no commitment - just answers from people who've shipped 250+ FDA submissions.